This bug was fixed in the package xine-lib - 1.1.14-1ubuntu1 --------------- xine-lib (1.1.14-1ubuntu1) intrepid; urgency=low
* merge from debian unstable. Remaining changes: - disable the jack plugin in libxine1-bin to make dapper->hardy upgrades work (LP #203605) - Modify Maintainer value to match the DebianMaintainerField specification. * New upstream fixes: - playback of MJPEG files LP: #93076 - CVE-2008-1878 LP: #235904 - CVE-2008-1686 LP: #218652 * remove Replaces: libxine-main1 (<< 1.1.2+repacked1-0ubuntu1). We don't support upgrades from dapper/feisty anymore. xine-lib (1.1.14-1) unstable; urgency=low * The "beat the freeze" release. * New upstream release. - All patches in 1.1.12-2 are present upstream. - MIME types added. (Closes: #472869) * Build-depend on libmagick9-dev | libmagick-dev | libmagickwand-dev. * Build-depend on ghostscript | gs | gs-gpl. -- Reinhard Tartler <[EMAIL PROTECTED]> Tue, 08 Jul 2008 22:35:48 +0200 ** Changed in: xine-lib (Ubuntu) Status: Fix Committed => Fix Released ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2008-1878 -- CVE-2008-1686: Multiple speex implementations insufficient boundary checks https://bugs.launchpad.net/bugs/218652 You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs